Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/602cd346-c94b-30dc-b3f0-119ca98a7ee7.roa
File:                     602cd346-c94b-30dc-b3f0-119ca98a7ee7.roa (raw, json)
Hash identifier:          8ftXBhnOlFzt6epg7/xohCJRezJMrlppZmUZCCqbJfA=
Subject key identifier:   4C:07:58:7B:3A:89:7C:13:A6:20:53:4A:55:C5:3F:64:D0:45:67:C0
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583F06D346A72FF2DDBF52849100
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/602cd346-c94b-30dc-b3f0-119ca98a7ee7.roa
Signing time:             Wed 24 Aug 2022 12:00:00 +0000
ROA not before:           Wed 24 Aug 2022 12:00:00 +0000
ROA not after:            Thu 29 Sep 2022 04:00:00 +0000
asID:                     8987
IP address blocks:        16.90.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:06:d3:46:a7:2f:f2:dd:bf:52:84:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Aug 24 12:00:00 2022 GMT
            Not After : Sep 29 04:00:00 2022 GMT
        Subject: CN=592f8dbb-c200-4a93-8eb7-47ce8637fd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c3:fb:bb:ee:30:c5:5a:e5:0e:61:f6:91:5f:
                    29:f6:47:c7:d0:e1:51:77:35:95:0a:c8:e1:45:ca:
                    78:f3:07:5c:01:87:9d:2c:bf:7e:6b:09:6f:18:c6:
                    c6:3d:47:5f:8b:6f:bb:7e:e0:27:aa:1d:1e:e9:45:
                    6e:c0:bd:ad:15:f1:ea:39:8d:5d:b3:18:7f:ad:65:
                    59:63:1a:8d:60:6b:e2:46:6f:0e:1e:4e:fa:4e:0b:
                    5b:ce:1f:85:7b:56:e6:e6:01:a3:5f:9c:d4:18:69:
                    36:6d:ff:63:77:ca:e8:2d:08:86:e2:aa:92:33:55:
                    dc:de:f3:af:18:45:b3:4f:48:46:83:93:f8:47:96:
                    72:df:01:5e:d1:08:c4:b5:41:ce:11:bd:cf:62:22:
                    97:19:79:66:7e:12:e9:17:70:81:77:81:84:07:af:
                    cc:64:2e:29:97:67:42:b9:72:c5:b6:40:8a:f6:85:
                    bf:3c:fa:4f:f0:55:cb:c9:fa:7d:9d:0b:10:05:3e:
                    8e:dd:60:09:5a:e7:3e:29:83:11:5f:2b:91:5b:a2:
                    20:16:db:41:fc:27:e6:2d:72:9d:aa:56:11:34:58:
                    2f:cd:35:9c:08:30:86:9b:9f:59:73:4b:0b:fe:f0:
                    9d:cb:37:b6:92:c4:1a:a4:82:fc:5d:37:88:d4:f9:
                    a1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:07:58:7B:3A:89:7C:13:A6:20:53:4A:55:C5:3F:64:D0:45:67:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/602cd346-c94b-30dc-b3f0-119ca98a7ee7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.90.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:c8:39:6f:24:19:d1:6d:cf:c9:ac:0e:99:82:39:85:d6:1b:
         a4:4c:fa:42:45:18:8f:97:0a:33:17:4e:cf:92:dc:f4:80:c8:
         1d:e9:f9:8d:b6:a9:a6:5e:2e:98:1a:22:a1:d0:4d:20:b3:70:
         2e:8e:f9:c1:1b:5d:de:d4:d2:f6:f0:98:f5:ba:8e:d2:da:58:
         8e:e3:6d:33:5f:5a:5a:07:5a:68:69:36:fe:2d:80:fc:52:af:
         a9:5a:00:af:1a:07:19:b6:60:9c:2f:79:98:50:75:1a:6c:ab:
         3c:73:0d:03:95:5d:6d:73:e9:3c:fd:05:d2:15:28:e7:6b:22:
         e8:28:3d:69:13:b5:22:d4:b1:c0:46:16:a4:a9:88:ca:5f:36:
         d2:0f:f4:20:ea:98:55:7c:2a:f5:51:8a:b6:b6:2a:b8:5c:7c:
         52:0b:9d:77:c0:3a:a8:ff:7e:0d:f2:53:02:ee:9f:3f:bc:6d:
         ec:e1:35:fd:81:00:30:2b:4e:dc:45:e1:81:67:40:c0:e5:42:
         bd:a4:56:32:96:fe:bf:ab:d1:93:20:8b:f9:61:c5:90:28:d6:
         4a:28:9a:e2:f2:f9:99:8e:fe:52:dd:3d:45:2b:63:01:eb:44:
         4a:b4:cf:e9:bd:46:9e:c7:8b:9d:72:9d:60:01:89:68:4e:f6:
         cf:38:3a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----